← Home

@baseplate-dev/create-project

CLI starter kit for creating a new Baseplate project

26
Versions
MPL-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

kingtam2000

Keywords

baseplateclicode-generationdevelopment-toolsfull-stackproject-starterscaffoldingtypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:env-spread AI (semgrep): Intentional env capture in npmrc setup script; expected pattern for credential configuration tooling. ai

Versions (showing 26 of 26)

Version Deps Published
0.6.13 8 / 9
0.6.12 8 / 9
0.6.11 8 / 9
0.6.10 8 / 9
0.6.9 8 / 9
0.6.8 8 / 9
0.6.7 8 / 9
0.6.6 8 / 9
0.6.5 8 / 9
0.6.4 8 / 9
0.6.3 8 / 9
0.6.2 8 / 8
0.3.3 6 / 8
0.3.2 6 / 8
0.3.1 6 / 8
0.3.0 6 / 8
0.2.6 6 / 8
0.2.5 6 / 8
0.2.4 6 / 8
0.2.3 6 / 8
0.2.2 6 / 8
0.2.1 6 / 8
0.2.0 6 / 8
0.1.3 6 / 8
0.1.2 6 / 8
0.1.1 7 / 6

v0.6.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.12

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.